July 12th, 2010 
Mourad Ben Lakhoua IBM Lotus Domino Server is a solution for the corporate environment that provides different services to manage electronic documents, and it includes many models such as Mail server, Http server and Data base. The current version is Lotus Domino 8.5.1. To detect the server we start by scanning the network, usually the server runs a [...]
Posted in Password Security, Pentesting, Vulnerabilities 
Tags: Ethical Hacking, Google Hacking, Lotus Domino, Security 
18 Comments » November 4th, 2009 Mourad Ben Lakhoua David Campbell a security consultant made a study regarding password safety. the research has been based on the cost evaluation of cracking password with a paid service by Amazon EC2 web service. The security expert found that for cracking 12 character password that is based on lowercase letters “a” and “z”, hackers would need to [...]
Posted in News, Password Security Tags: Cloud computing, Passowrd Hacking, Password recovery, Password Security 7 Comments » September 21st, 2009 Mourad Ben Lakhoua USB Switchblade is a tool that can help you to be a king on the enemies’ land. Hack5 USB Switchblade is the second name for this tool but this does not change anything. The project consists of several software packages that do a great job for password grabbing and pentesting: Dump SAM is made for [...]
August 15th, 2009 Mourad Ben Lakhoua VPN (Virtual private network) is often used for securing communication over the public network, many security specialists advice to use it in the public Wi-Fi to encrypt all traffic and make it impossible for outsider to sniff information or to provide a remote access to an offsite user, but after implementing the VPN connection there [...]
Posted in Password Security, Pentesting, Tools Tags: Passowrd Hacking, Password recovery, Pentesting, Tools 12 Comments » August 13th, 2009 Mourad Ben Lakhoua eBay security specialists asked developer program members to change their passwords. This is due to a new vulnerability discovered that can allow an attacker to intercept important accounts details. Kumar Kandaswamy eBay Developers program manager has reported on the guidance published that the company has found a way in which an outsider can access users [...]
Posted in Internet, News, Password Security, Vulnerabilities & attacks, Web Security Tags: eBay, Password Security, Vulnerability No Comments » July 29th, 2009 Mourad Ben Lakhoua There are an immense number of tools for Brute force and password recovery that have been created to help security specialist in pentesting and evaluate application and system password level security. Let’s start with Brutus AET2, from 2000 there were no update for this tool. But this tool appears as one of the fastest and [...]
Posted in Password Security, Tools Tags: brute force, Brutus AET2, L0phtcrack, Password recovery, THC-Hydra, TSGrinder 2 Comments » June 1st, 2009 Mourad Ben Lakhoua After more than three years since Symantec stopped the support and development of L0phtcrack the tool that provided a titanic opportunity for passwords auditing and recovery. Here comes yesterday the same team with the new version L0phtcrack 6. As the project rights being reacquired by the original authors from Symantec it was possible for them [...]
Posted in Best Practices, Password Security, Pentesting Tags: Authentication/Encryption, hacking, L0phtcrack 6, Operating Systems, Pentest, Security 1 Comment »
